I'm starting this as a new topic because in my opinion we need to think about this possibility (however remote it may be).

I'm certain all of you are aware that viruses can be a major problem with Windows. Some of you who were or are Windows users have not had virus problems. I know that GrannyGeek, who has used Windows since version 3.0, has not had problems with viruses or other malware. I imagine that other have had such problems. I myself used to have major virus problems back when I used Windows. On a number of occasions I had to do complete reinstalls of the OS because I couldn't get rid of the virus problems that I had.

As things are now, viruses are not a problem for Linux. I think that there are two main reasons for this: 1) Only root can install software on a Linux system (I know, except in your home directory, but right now I'm focusing on things that could affect an entire install), and 2) There aren't any Linux viruses (that last isn't strictly true - malware programs for Linux number in the hundreds).

Though it is hard to come by solid numbers for Windows viruses, there are at least tens of thousands and possibly over 100,000.

It's probable that many of you know that it can be difficult to get people to focus on the security of their computers. I know people who have bought machines with Norton installed who have turned off Norton because it slows down their machine, or who have failed to renew their subscriptions to Norton. Many of those same people have called me (sometimes in the middle of the night) because their virus load has become so high that their computers have become a big doorstop. These are also the people who find the Windows Vista "Allow/Deny?" pop-up so annoying that they find a way to turn it off.

Now, imagine this scenario. The "price break" (at least in the US) for consumer electronics is around $200. This means when the price of a particular product falls to $199.99, a whole lot more people are going to buy it than would before. With netbooks (Asus EEE etc.) we're either there or very close. I'm not saying this is going to make Linux extremely popular, but market share might increase dramatically, from the current below 1%.

If this happens, people are going to be even more annoyed at having to give a root password than they are by the "Allow/Deny" pop-up. I see two possible results: 1) People will buy the Windows versions of these inexpensive computers, and/or 2) Somebody will come up with a distro or version of a distro in which users have root privileges by default. If the second thing happens, then it's quite possible that Linux viruses could become a real problem.

I know that this isn't going to be a problem for us, since nobody who's been using Linux prior to this potential problem is going to give root privileges to regular users. Nevertheless, I think we as a community (the Linux community as it exists today) have a certain responsibility to at least consider this potential danger and think of possible solutions. After all, many of us have been saying for years that people should use Linux rather than Windows (I have said it quite a few times). If we urge people to do something, we are obliged to bear some of the burden of the consequences in the event that people do what we've been urging them to do.

If anybody is interested in discussing this issue, please post your thoughts.

Tom

Logged

"I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu) for 386(486) AT clones." - Linus Torvalds, April 1991

I am convinced that Linux viruses will appear as soon as the incentive to write them is great enough.

When Linux becomes commonplace, with auto-login and users running it like they do Win boxes now, root access is not necessary. Viruses can still send out spam from a running user account.

The root account will also be breached. If people can hack iPhones, Xboxes, mainframes and defense department servers, a consumer Linux machine is not safe. We will have to continue to adapt and evolve.

That said, the diverse Linux landscape should remain a much harder target than the current monoculture.

I am convinced that Linux viruses will appear as soon as the incentive to write them is great enough.

I'm calling bovine manure!*nix IS the target with the biggest incentive; The vast majority of the Internet- AND corporate serves are running on *nix.And that's where the dough is.(for the virus-writing scum, that is)

No doubt that high-powered, always-on, high-bandwidth *NIX servers are very tempting targets for the scum you are referring to. Professionally managed mainframes and server farms have always been under attack.

I was thinking more of the personal desktop computer. Many botnets consist of compromised PC's, where viruses are spread mainly through user action; web surfing, e-mail, IM, installing anything that promises instant riches, free mp3's, activation cracks, funny cursors, or a glimpse of skin.

The thought or perception that alot of people even on this distribution is probably not good. I am finding many that I am helping with Linux are indeedonly working as root. As mentioned this is a problem. Ubuntu using sudo the way that it does is somewhat default root. It is easy to type sudo without athought.

In my experience those without virus problems use their internet connections wisely and also in what appears to be somewhat narrow scope.

Guarding against virus problems in Linux. Place sane permissions on things. Stop the thoughts of open it and close later. Use a firewall in a proper sense.

Thinking that a computer is an appliance is not a good thing. There is a responsibility of the computer user. There are so many people that think is Samba is file sharing program instead of networking protocol creates problems.

The current Linux community is failing those that have been using it for a longtime by not educating new users about how things are done. It maybe that insisting that those whomwish to be involved understand some of the above problems.

The thought that designing Linux to mimic something else will be detrimental instead of a positive effect. Almost all of the spin offs of the major distros are following that way. Lets' makea GUI to have access to all of the tools for system configuration, and in the process not create a good log to show where the problems are. For troubleshooting its a mess.

The fact that it is now acceptable to answer the same question twice. The fact that instead on allowing one program to do one thing well. The simplicity of expected tools in all distributions.

Most of these reasons are why older users are moving into tight knit place, or moving away from Linux completely. There is the argument from those that asking a question in those areasis dangerous and unwelcoming. I have not found that to be the case. In fact if you follow the old rules which is put forth effort before asking, like using Google. Then your question will be answered as well as welcomed.

I know I started this discussion, so I should just let people say what they have to say and be quiet ... but I feel the need to respond to what you wrote.

I don't think what you wrote was a rant. I certainly wouldn't flame you for any of it. In fact, I agree with pretty much everything you wrote.

I strongly agree with what you wrote about the overuse of "sudo." I'm glad VL doesn't do this by default, and that it's not encouraged. I'm a little surprised that it doesn't cause problems for the Ubuntu community (maybe it does and I just don't know about it).

I also agree that older users need to educate new users about how to use Linux. I think that's done very well here at VL. You yourself answer many questions in the "Vectorbie" section in a helpful but proper Linux way - meaning that you steer people away from bad practices and ideas. I just have one question for you: If people can buy a Linux computer over the Internet or from a store, what can we do to help educate them that we're not already doing?

Thanks,Tom

Logged

"I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu) for 386(486) AT clones." - Linus Torvalds, April 1991

That is the magic question. It is unfortunate that the general public has been taught that a computer is no more than an appliance. In every forum that I have been to there are stickies most containing the how to ask a proper question. The stickies are ignored. That is a problem. While answering question I attemptto direct folks in that direction. Which would be describe the problem, attemptedsolutions and the hardware and or software involved. I am not really sure if the message is even received.

The next problem is the reluctance to feel responsible for using a computer and the possible effects that it can have. One of the responses are I just want it to work and I don't care how the background involved. Not to mention these same people are part of the spam problem since their computers are involved in the botnets.

So perhaps in a non invasive way show the users of Vector the way and the reasons behind it. By no means am I suggesting ignoring or flaming anyone who is not interestedin the when,where and why. I am suggesting this direction so that perhaps some of the samequestions can be avoided. The other problem with this forum is searching, my solution is using Google with Vector Linux ________________ I found better hits than the forum search.

I will respectfully disagree in one: I don't mind to answer a question twice or pointing to a solution several times. An introduction by an experienced user is always needed. Is not that easy to search in Google if you don't know what are you exactly looking for. Nobody educates their children by telling 'read man "crossing the street"'. We do a lot of stuff to teach them hoping that one day they will learn (or at least try to) by themselves (please excuse the example, its hard to not agree with it but is in doubt if it applies to this case, its just the better I can think right now . Of course is not the same a user that want's to learn than one that just want's someone else solving their problems. But indeed is not that easy to learn something new, recognize pertinent solutions to some problems, or make a difference between a good answer and a stupid thing Google returns in 3rd place. What is evident to an experienced user might not be to a newbie.

I think it's ok if Linux mimics other stuff, it's not ok to mimic Windows or Mac. Instead radical changes in the operating system I would try to write better documents or to be more patience explaining to newbies, even thinking about new ways to communicate our ideas. Nobody would turn the relativity theory into 2+2 just because it's hard to understand or because the "learning curve is too hard." If something is well done it is at least wrong to change it because is not simple at first glance. This doesn't mean the Linux interfaces can't be improved or that it's wrong to try to make a more intuitive Operating System, of course.

Logged

"There is a concept which corrupts and upsets all others. I refer not to Evil, whose limited realm is that of ethics; I refer to the infinite."Jorge Luis Borges, Avatars of the Tortoise. --Jumalauta!!

This isn't enough to change things in terms of viruses in any significant way (in my opinion), though it could be a sign of things to come. I still think that if enough low end machines (netbooks, etc.) are sold with Linux on them, we may have a problem.

Tom

Logged

"I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu) for 386(486) AT clones." - Linus Torvalds, April 1991

Speaking of forum search:am I the only one having problem with it giving me a whole bunch of random posts that have nothing to do with what I am searching for?(I mean literally. Not a single word that I enter can be found in those posts.)

The problem with newcomers reading manuals is that people who switched from windows simply ignores them(basing this from myself and people I know). windows manuals are for most part impossible to read, and even if one manages to do that, the main point they lead to is to double click on everything, that right click and if nothing works, call for support. The main way to solve problems on windows for me was to blindly guess. Linux manuals and manuals for various software for Linux are different. They are meaningful, have all the options listed and can point to related manuals that may help in solving a problem. Sometimes it gets boring to view dozens of pages of commands and options totally unrelated to my issue, but at least I know that there is a reason for doing that.

There is also a reason why newcomers tend to "do things windows way in Linux". They simply do not know how else to do them. If there was some good introductory article like "Why there is a root privilege and some pretty important reasons why one should not be logged in as root all the time and/or overuse sudo". Maybe there is one somewhere and I just did not happen to run across it.

And about viruses: Besides my own guesses and conclusions, I have no idea why there is no viruses for Linux(now that I know from the first post that there is actually few hundred Linux malware programs out there, it is even more confusing to me). I need to go and get some knowledge on this issue before trying to discuss it. This is an interesting thread, though. Big thanks to Tom for creating it.

The thought that designing Linux to mimic something else will be detrimental instead of apositive effect.

Agreed. An example is linux distributions in netbooks: no root password, and (sometimes) auto-login to a user called "user". Sudo allows you to do everything. Plus, several services running at boot and no gui way to remove them.Seems silly, especially for machines that are supposed to be on the net, using a bunch of different wireless networks.

(ironically, the xandros distribution in the eee includes clamav. Probably because Windows users would feel "unsafe" without an anti-virus)